Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d151e65-b199-3f9b-9fad-ad26684da522.roa
File:                     2d151e65-b199-3f9b-9fad-ad26684da522.roa (raw, json)
Hash identifier:          ZFofJr3codEK7S/TQw1/Y9KH8hsD1FAuAX7AUs4IeWc=
Subject key identifier:   99:51:58:1D:6E:9A:2E:30:C8:AB:75:DB:7B:EA:76:F7:78:1E:AA:10
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB220B7D98470186752D08C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d151e65-b199-3f9b-9fad-ad26684da522.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.252.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:b7:d9:84:70:18:67:52:d0:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=d06fc2f8-b61f-4033-bf77-df45bd6b6321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:ad:88:a5:8a:e6:90:79:ca:c2:c2:04:1f:
                    e2:4a:2e:21:99:9a:fe:62:a3:2c:ef:31:b1:56:6d:
                    66:ac:6e:00:b5:d4:47:48:70:0b:5e:c2:72:d6:50:
                    42:dd:ef:88:c6:75:19:be:c2:95:21:f7:f8:c2:c3:
                    74:82:8b:7b:af:2a:de:bc:97:9b:9b:9e:83:5b:d8:
                    f1:92:ea:e4:4d:09:e0:36:a2:9b:38:a4:29:a1:8f:
                    76:2d:56:03:93:09:7a:72:f1:ef:79:13:5f:0f:c2:
                    cf:e5:25:cd:a2:ae:41:e0:f6:49:1b:00:5a:4b:1e:
                    39:83:f9:17:39:68:7a:82:f9:a2:4a:11:ff:8a:b1:
                    f0:af:83:10:d7:a2:06:14:53:d0:bc:50:ec:01:dc:
                    0a:79:02:a3:dc:5e:74:12:7c:6d:8e:ae:30:dd:4b:
                    8e:6b:df:2b:ac:83:a8:d8:66:81:d2:f5:3d:b5:aa:
                    1f:dc:5d:b0:01:5b:40:9d:6b:af:1f:8f:bd:c7:e1:
                    8f:98:8b:df:d8:06:aa:6c:97:01:78:70:2d:4f:27:
                    29:26:c1:bf:d6:3a:0e:2c:60:79:0e:11:4e:15:6a:
                    ad:f9:f7:94:45:77:e3:29:ee:73:e6:b0:b0:1f:e4:
                    33:59:19:6d:f7:54:04:22:27:25:55:5f:2b:7b:be:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:51:58:1D:6E:9A:2E:30:C8:AB:75:DB:7B:EA:76:F7:78:1E:AA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d151e65-b199-3f9b-9fad-ad26684da522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:01:5b:6e:e7:55:64:00:40:74:ee:a0:60:3d:df:b8:b8:4b:
         a1:29:86:9c:db:cc:7f:48:82:cc:c8:a7:7f:3a:80:4b:86:81:
         4c:6c:11:39:a1:57:a7:3c:db:27:c4:f2:80:64:9d:49:ec:0a:
         a5:24:4b:5e:21:a1:4f:87:68:a3:a8:f5:48:4d:b6:6c:ba:65:
         d0:a1:0f:25:d4:5d:3b:26:93:7b:39:36:74:7b:15:d3:e4:55:
         9a:67:29:97:27:78:00:1f:15:9d:9b:8b:01:74:9b:bc:db:fd:
         e8:da:45:0d:f3:27:2c:4d:aa:bf:1d:c3:59:84:dc:50:99:eb:
         d2:45:50:fe:3b:06:f3:77:07:b5:78:1e:42:e8:c8:10:79:95:
         41:29:01:2b:3c:7c:5e:97:b6:7b:e6:46:ec:12:1a:8d:71:ec:
         6a:ea:58:32:65:bb:09:9f:da:40:a3:f8:2b:cf:34:ba:de:e0:
         5d:b8:76:3a:ce:c7:3e:3f:69:18:ed:2d:ac:bd:0b:70:7b:83:
         13:85:c1:0e:c7:20:a7:22:8b:2a:72:9f:3a:26:30:2e:2f:46:
         eb:ec:9c:e9:96:ef:e9:6d:b8:3b:37:8a:84:f3:e8:91:2c:e7:
         9d:01:a0:82:d7:2b:b2:bb:fc:77:8a:31:df:8c:f6:37:e1:7b:
         be:7e:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:27:06 2025 by rpki-client